Details
-
Type:
Improvement
-
Status: Done/Fixed
-
Priority:
Major
-
Resolution: Fixed/Completed
-
Affects Version/s: None
-
Fix Version/s: 1.8
-
Component/s: Core CiviCRM
-
Labels:None
Description
Drupal does not (or not always) requires authentication when accessing files in CiviCRM's subdirs (like bin or extern). We should make sure all of our sensitive scripts require some sort of authentication, so they can't be executed anonymously.